General

  • Target

    Trojan-Ransom.Win32.Blocker.jzec-27c025131e9b0d4792124b3c36f5023a4f8ee5ba9967ea2182a08042a5c82fa9

  • Size

    206KB

  • MD5

    a35d448b58765eb030a8d0fc0ea47f79

  • SHA1

    1dff96dd99113ea854309a34301d5aac0d80c004

  • SHA256

    27c025131e9b0d4792124b3c36f5023a4f8ee5ba9967ea2182a08042a5c82fa9

  • SHA512

    c8a28a7c67303e40796ee1223044f95d037cc6137a926b53320a268e67cd3a6283c49fd2dd4f8d9f8513258e5d81720666434bc4b776455aff746b5468302ccf

  • SSDEEP

    6144:LG7u6jrkwvKaXR0cyYLF6lcBapBdd2td:y7u6jvnXRsLiATid

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • Trojan-Ransom.Win32.Blocker.jzec-27c025131e9b0d4792124b3c36f5023a4f8ee5ba9967ea2182a08042a5c82fa9
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections